regolith-desktop.org SSL certificate expired

[ycornamusaz]

Hi, just wanted to apt update my repos and did fall on an SSL certificate expired.

Here is the output of the command openssl s_client -connect regolith-desktop.org:443 -showcerts

CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = regolith-desktop.org
verify error:num=10:certificate has expired
notAfter=Mar  8 12:20:48 2023 GMT
verify return:1
depth=0 CN = regolith-desktop.org
notAfter=Mar  8 12:20:48 2023 GMT
verify return:1
---
Certificate chain
 0 s:CN = regolith-desktop.org
   i:C = US, O = Let's Encrypt, CN = R3
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Dec  8 12:20:49 2022 GMT; NotAfter: Mar  8 12:20:48 2023 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jan 20 19:14:03 2021 GMT; NotAfter: Sep 30 18:14:03 2024 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = regolith-desktop.org
issuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4583 bytes and written 402 bytes
Verification error: certificate has expired
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 10 (certificate has expired)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: F2077CB68A65F7E7A690003651531E6BE2C3AB1AE7545229783BC6124E1C1560
    Session-ID-ctx: 
    Resumption PSK: 4B4C73EFDA900B849B77347BA555B95E4668378E76738B0CBAB5232B2C3B7563526E541FE849E1F5658F030DC2C00CE2
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 47 ba 12 e4 b0 78 6f e4-60 24 7b ff f4 7c 46 94   G....xo.`${..|F.
    0010 - b4 0d e7 d9 cc b4 6e 3b-96 99 bc 2f e3 71 97 e2   ......n;.../.q..
    0020 - 29 fd be ad 4e 0a 4a c5-c0 cf 09 bc 25 e1 92 c0   )...N.J.....%...
    0030 - be 41 48 e8 68 39 ec 86-67 6e 36 9c c9 1e 68 17   .AH.h9..gn6...h.
    0040 - 85 e0 3c 96 e6 a1 0c d2-d3 30 73 76 ce a2 48 21   ..<......0sv..H!
    0050 - 84 7c 25 e1 e3 6c f7 d6-25 dc 0d 01 23 a3 18 78   .|%..l..%...#..x
    0060 - fb 76 86 c9 84 9d 06 55-ba e8 77 58 35 e9 ce 9d   .v.....U..wX5...
    0070 - 45 e6 cc d3 89 87 27 c9-fb 38 64 3f 81 d5 76 40   E.....'..8d?..v@
    0080 - 92 31 6d ee 77 40 92 ca-3b 35 15 7a a9 0f 6a 77   .1m.w@..;5.z..jw
    0090 - e2 eb 04 c6 22 0e 9c 45-60 aa 80 9c 2b bd 97 4b   ...."..E`...+..K
    00a0 - d0 4e 9f cc 4b e1 00 f2-e9 00 8d 57 1d 10 35 42   .N..K......W..5B
    00b0 - ef 0a 52 55 53 c3 e7 3a-e9 39 8f 89 1c 51 2c 60   ..RUS..:.9...Q,`
    00c0 - f8 af a1 71 49 69 a0 52-65 ea ee f1 91 2e f5 b3   ...qIi.Re.......

    Start Time: 1678280988
    Timeout   : 7200 (sec)
    Verify return code: 10 (certificate has expired)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: B4B0FB0DC849F0D29E8267E32960AD730AE5DA8251DEFE9F49C7659EC19D0F60
    Session-ID-ctx: 
    Resumption PSK: 9EE5F92507808F7E0275905444196E9DB780562DD9FED0B866F6B7B62F66624A954EB2285B47225B0038F357C3BEFA61
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 47 ba 12 e4 b0 78 6f e4-60 24 7b ff f4 7c 46 94   G....xo.`${..|F.
    0010 - 60 85 4b 67 ba 80 84 93-59 84 3f 20 59 1b cd c4   `.Kg....Y.? Y...
    0020 - e5 8d dd 6b 63 56 c6 74-67 ce e0 72 94 16 d3 0d   ...kcV.tg..r....
    0030 - 44 5e 3d 7a 5c bc 1c 13-af fb df 89 60 12 18 b4   D^=z\.......`...
    0040 - 79 26 6c 10 2e 7e bc 6a-c2 cf a4 03 c3 33 41 28   y&l..~.j.....3A(
    0050 - 52 b8 c7 51 e2 68 b0 9c-26 ba f4 94 8d b5 04 93   R..Q.h..&.......
    0060 - b9 10 61 c9 b1 52 d0 6c-f3 f0 97 2d 5a 10 c8 81   ..a..R.l...-Z...
    0070 - fa 23 6f 5f 70 46 eb 4f-0f d1 57 0e 2d 67 e7 24   .#o_pF.O..W.-g.$
    0080 - d4 0c 06 3a ce 53 ef 3a-e8 84 4f 63 59 a4 eb 17   ...:.S.:..OcY...
    0090 - a2 f0 3d 16 38 ed 38 6c-77 ed b2 26 37 19 9c 5d   ..=.8.8lw..&7..]
    00a0 - 8a 33 24 25 ea 80 c2 84-93 d0 91 f8 0b 06 d1 ac   .3$%............
    00b0 - 8c c1 3d 4b 80 d5 6a f7-f5 e3 74 ed 4a 06 b3 3a   ..=K..j...t.J..:
    00c0 - 5b d1 ba b6 ae 26 4a 8c-1a 7a 43 fc f7 27 4a 31   [....&J..zC..'J1

    Start Time: 1678280988
    Timeout   : 7200 (sec)
    Verify return code: 10 (certificate has expired)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
closed

It seems to be quite fresh as it expired on Mar 8 12:20:48 2023 GMT